summaryrefslogtreecommitdiffstats
path: root/security/ipe
AgeCommit message (Expand)AuthorLines
2026-02-21Convert 'alloc_obj' family to use the new default GFP_KERNEL argumentLinus Torvalds-6/+6
2026-02-21treewide: Replace kmalloc with kmalloc_obj for non-scalar typesKees Cook-6/+6
2026-01-20kernel.h: drop hex.h and update all hex.h usersRandy Dunlap-0/+1
2025-12-03Merge tag 'ipe-pr-20251202' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds-1/+33
2025-12-03Merge tag 'integrity-v6.19' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds-0/+1
2025-12-02ipe: Add AT_EXECVE_CHECK support for script enforcementYanzhu Huang-0/+32
2025-12-02ipe: Drop a duplicated CONFIG_ prefix in the ifdefferyBorislav Petkov (AMD)-1/+1
2025-11-19ima: Access decompressed kernel module to verify appended signatureCoiby Xu-0/+1
2025-10-22ipe: move initcalls to the LSM frameworkPaul Moore-3/+4
2025-10-22lsm: replace the name field with a pointer to the lsm_id structPaul Moore-1/+1
2025-07-31Merge tag 'ipe-pr-20250728' of git://git.kernel.org/pub/scm/linux/kernel/git/...Linus Torvalds-28/+6
2025-07-28ipe: use SHA-256 library API instead of crypto_shash APIEric Biggers-28/+6
2025-06-17ipe: don't bother with removal of files in directory we'll be removingAl Viro-22/+14
2025-05-27ipe: add errno field to IPE policy load auditingJasjiv Singh-26/+63
2025-03-24ipe: policy_fs: fix kernel-doc warningsRandy Dunlap-2/+6
2024-10-18ipe: fallback to platform keyring also if key in trusted keyring is rejectedLuca Boccassi-1/+1
2024-10-17ipe: allow secondary and platform keyrings to install/update policiesLuca Boccassi-1/+32
2024-10-17ipe: also reject policy updates with the same versionLuca Boccassi-1/+1
2024-10-17ipe: return -ESTALE instead of -EINVAL on update when new policy has a lower ...Luca Boccassi-1/+1
2024-09-23ipe: Add missing terminator to list of unit testsGuenter Roeck-0/+1
2024-08-22ipe: Remove duplicated include in ipe.cYang Li-1/+0
2024-08-20ipe: kunit test for parserDeven Bowers-0/+316
2024-08-20scripts: add boot policy generation programDeven Bowers-0/+43
2024-08-20ipe: enable support for fs-verity as a trust providerFan Wu-1/+237
2024-08-20ipe: add support for dm-verity as a trust providerDeven Bowers-4/+448
2024-08-20ipe: add permissive toggleDeven Bowers-4/+102
2024-08-20audit,ipe: add IPE auditing supportDeven Bowers-18/+381
2024-08-20ipe: add userspace interfaceDeven Bowers-0/+727
2024-08-20ipe: introduce 'boot_verified' as a trust providerFan Wu-6/+101
2024-08-20ipe: add LSM hooks on execution and kernel readDeven Bowers-0/+235
2024-08-20ipe: add evaluation loopDeven Bowers-0/+127
2024-08-20ipe: add policy parserDeven Bowers-0/+697
2024-08-19lsm: add IPE lsmDeven Bowers-0/+84